Skip to content
Threat Feed
Subscribe

Product

DroidMind (<= 0.4.0)

1 brief RSS
high advisory

DroidMind: Command injection vulnerability (CVE-2026-117559)

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $(...) or backtick substitution.

DroidMind
1c